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Art Unit: 2164 

DETAILED ACTION 
Remarks 

1. In response to communications filed on 9-November-2004, claims 1,4-14, 16-20, 25, 28- 
41, 43-47, 49, 52-53, 55, 58-61, 65-66, 68-69, 71, and 74-75 have been amended, claims 24, 51, 
and 79 have been canceled, and claims 88-90 have been added per applicant's request. Claims 1- 
23, 25-50, 52-78, and 80-90 are presently pending in the application. 

Specification 

2. The attempt to incorporate subject matter into this application by reference to "System 
and Method for Managing and Securing Meta Data" is ineffective because the specification 
needs to be amended to identify the proper application number and filing date. 

3. The disclosure is objected to because it contains an embedded hyperlink and/or other 
form of browser-executable code. Applicant is required to delete the embedded hyperlink and/or 
other form of browser-executable code. See MPEP § 608.01. 

Claim Rejections - 35 USC § 112 

4. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

5. Claims 10, 13, 37, 40, 52, 65, 68, and 89 are rejected under 35 U.S.C. 112, second 
paragraph, as being indefinite for failing to particularly point out and distinctly claim the subject 
matter which applicant regards as the invention. 
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Claim 10 in line 5, claim 37 in line 8, and claim 65 in line 6 recite the limitation "the each 
context". There is insufficient antecedent basis for this limitation in the claim. 

Claims 13, 40, and 68 each recite the conditional "if the local repository is at a null state". 
Occurrence of this limitation would create a logical inconsistency because a local repository was 
updated with at least one segment from the central repository to produce a meta data collection 
prior to the "utilizing", which is when this conditional is said to occur. If the local repository is 
updated with at least one segment it is not going to be in a "null state". 

Claim 89 recites the limitation "the local depository" in lines 26-27. There is insufficient 
antecedent basis for this limitation in the claim. 

Claim 52 is rejected for being dependent on rejected independent claim 89. 

Claim Rejections - 35 USC § 102 

6. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

7. Claims 1-4, 10-11, 17, 20-22, 28-31, 37-38, 44, 47-49, 55-57, 59, 77, 83, and 85-87 are 
rejected under 35 U.S.C. 102(b) as being anticipated by Dedrick (U.S. patent No. 5,710,884). 
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As to claim 1, Dedrick teaches a method of managing meta data using a central repository 
at a central repository subsystem, the central repository being accessible by a computing device 
through a communications network (see abstract), the method comprising the steps of: 

connecting to the central repository through the communications network based on a user 
input (see column 20, lines 4-21); 

updating a local repository of the computing device with at least one segment from the 
central repository that is associated with the user to produce a meta data collection associated 
with the user (see column 20, lines 22-29); and 

utilizing, by the computing device, the meta data collection during a current user session 
at the computing device to assist the user in using the computing device (see column 7, line 40 
through column 8, line 22), 

wherein the utilizing step comprises retrieving, from the metadata collection, metadata 
that would be most appropriate for each of different contexts of using the computing device (see 
column 7, line 40 through column 8, line 22). 

As to claims 2, 29, and 56, Dedrick teaches further comprising the step of: 
uploading any new segment from the computing device to the central repository at a 
predetermined time (see column 20, lines 26-29). 

As to claims 3, 30, and 57, Dedrick teaches further comprising the step of: 
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incrementally uploading any new meta data generated during the current user session 
from the computing device to the central repository (see column 20, lines 26-29). 

As to claims 4, 31, and 59, Dedrick teaches wherein the connecting step comprises: 
receiving, by the central repository subsystem, authentication information from the user 

(see column 20, lines 10-15); 

verifying validity of the authentication information (see column 20, lines 14-17); and 
notifying the computing device that the user has proper authority to access the central 

repository if the authentication information is verified as valid (see column 20, lines 20-24). 

As to claims 10 and 37, Dedrick teaches wherein the retrieving step is performed using 
heuristics algorithms (see column 7, line 40 through column 8, line 12); and the utilizing step 
further comprises applying the retrieved meta data in each context (see column 7, lines 40-52). 

As to claims 1 1 and 38, Dedrick teaches wherein the current context comprises at least 
one of the following: opening a web page, filling in a computer form, filling in a password- 
changing form, providing a certificate, opening a computer file, processing a computer file, or 
executing an application program (see column 7, line 40 through column 8, line 23). 

As to claims 1 7 and 44, Dedrick as modified, teaches wherein the current context is for 
filling in a computer form, and the applying step comprises: automatically filling in the computer 
form with said most appropriate meta data (see Dedrick , column 8, lines 13-22). 
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As to claims 20 and 47, Dedrick teaches wherein the utilizing step comprises: 
formulating search requirements based on a current context of using the computing 

device; and executing a search based on the search requirements using the heuristics algorithms 

(see column 7, line 9 through column 8, line 31). 

As to claims 21 and 48, Dedrick teaches wherein the search requirements specify 
weighted properties of the current context of using the computing device (see column 7, line 9 
through column 8, line 31). 

As to claims 22 and 49, Dedrick teaches further comprising the step of: providing a 
graphical user interface (GUI) for allowing the user to organize the meta data collection (see 
column 7, lines 53-64 and see column 8, lines 23-31). 

As to claim 28, Dedrick teaches a computer program product embodied on computer 
readable medium readable by at least one of a computing device and a central repository 
subsystem, for managing meta data using a central repository at the central repository subsystem, 
the central repository being accessible by the computing device through a communication 
network (see abstract), the computer program product comprising: 

computer executable code configured to connect, through the communications network, 
to the central repository based on a user input (see column 20, lines 4-21); 
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computer executable code configured to update a local repository of the computing 
device with at least one segment from the central repository that is associated with the user to 
produce a meta data collection associated with the user (see column 20, lines 22-29); and 

computer executable code configured to utilize, by the computing device, the meta data 
collection during a current user session at the computing device to assist the user in using the 
computing device (see column 7, line 40 through column 8, line 22), 

wherein the computer executable code configured to utilize comprises computer 
executable code configured to retrieve, from the meta data collection, meta data that would be 
most appropriate for each of different context of using the computer device(see column 7, line 40 
through column 8, line 22). 

As to claim 55, Dedrick teaches a system for managing meta data in a secure mamier (see 
abstract), the system comprising: 

a central repository subsystem comprising a central repository for storing a plurality of 
segments associated with a user in a collection order (see column 9, lines 57-65); and 

at least one computing device capable of communicating with the central repository 
subsystem through a communications network, the computing device comprising a local 
repository and being capable of connecting, through the communications network, to the central 
repository based on a user input (see column 20, lines 4-21), updating the local repository with at 
least one of the segments from the central repository to produce a meta data collection associated 
with the user (see column 20, lines 22-29), and utilizing the meta data collection during a current 
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user session at the computing device to assist the user in using the computing device (see column 

7, line 40 through column 8, line 22), 

wherein the computer device retrieves, from the meta data collection, meta data that 
would be most appropriate for each of the different context of using the computer device (see 
column 7, line 40 through column 8, line 22). 

As to claim 77, Dedrick teaches further comprising: a meta data editor for allowing the 
user to organize the meta data collection, (see column 7, lines 53-64 and see column 8, lines 23- 
31). 

As to claim 83, Dedrick teaches wherein at least one of the central repository and the 
local repository is implemented using a network-attached storage (see column 3, lines 7-49). 

As to claims 85-87, Dedrick teaches wherein the different contexts are rolls of the user 
(see column 7, line 40 through column 8, line 22, where "rolls" is read on the action the user is 
currently trying to perform such as web browsing or buying). 

Claim Rejections - 35 USC §103 

8. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
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having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

9. Claims 5-6, 32-33, and 60-61 rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dedrick (U.S. patent No. 5,710,884) in view of Nguyen (U.S. patent No. 5,638,448). 

As to claims 5, 32, and 60, Dedrick does not teach wherein the authentication information 
comprises user identification, a pass phrase of the user, and an identifier for the central 
repository or a component at the central repository subsystem. 

Nguyen teaches secure communication sessions on a network (see abstract), in which he 
teaches wherein the authentication information comprises user identification, a pass phrase of the . 
user, and an identifier for the central repository or a component at the central repository 
subsystem (see column 16, lines 13-33). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick to include wherein the authentication 
information comprises user identification, a pass phrase of the user, and an identifier for the 
central repository or a component at the central repository subsystem. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of Nguyen because wherein the 
authentication information comprises user identification, a pass phrase of the user, and an 
identifier for the central repository or a component at the central repository subsystem would 
prevent the password from being transferred over the network and allow both the client and 
server to authenticate each other (see Nguyen , column 16, lines 13-16). 
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As to claims 6, 33, and 61, Dedrick as modified, teaches wherein the verifying step 
comprises: determining a secret key represented as a hash of: the received user identification 
concatenated with a hash of the received identifier, concatenated with the received pass phrase; 
and comparing the secret key with a stored key associated with the user (see Nguyen , column 16, 
lines 13-33). 

10. Claims 7-9 and 34-36 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dedrick (U.S. patent No. 5,710,884) in view of Kim (US. patent No. 6,546,002 Bl). 

As to claims 7 and 34, Dedrick does not teach wherein the updating step comprises: 
determining if the local repository is at a null state; 

first requesting the central repository subsystem to transmit any segment associated with 
the user that has not been applied to the computing device if the determining step indicates that 
the local repository is not at a null state; and 

second requesting the central repository subsystem to transmit all segments associated 
with the user if the determining step indicates that the local repository is at a null state. 

Kim teaches using a mobile profile to dynamically access programs, URLs, telephone 
numbers, television channels, and radio stations (see abstract) in which he teaches wherein the 
updating step comprises: determining if the local repository is at a null state (see column 7, lines 
38-65); first requesting the central repository subsystem to transmit any segment associated with 
the user that has not been applied to the computing device if the determining step indicates that 
the local repository is not at a null state (see column 7, lines 52-65); and second requesting the 
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central repository subsystem to transmit all segments associated with the user if the determining 
step indicates that the local repository is at a null state (see column 7, lines 44-51). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick to include wherein the updating step 
comprises: determining if the local repository is at a null state; first requesting the central 
repository subsystem to transmit any segment associated with the user that has not been applied 
to the computing device if the determining step indicates that the local repository is not at a null 
state; and second requesting the central repository subsystem to transmit all segments associated 
with the user if the determining step indicates that the local repository is at a null state. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of Kim because wherein the 
updating step comprises: determining if the local repository is at a null state; first requesting the 
central repository subsystem to transmit any segment associated with the user that has not been 
applied to the computing device if the determining step indicates that the local repository is not 
at a null state; and second requesting the central repository subsystem to transmit all segments 
associated with the user if the determining step indicates that the local repository is at a null state 
would synchronize data with the server if the profile was already on the client and copy the 
profile to the client if it was not already there (see column 7, lines 38-65). 

As to claims 8 and 35, Dedrick as modified, teaches wherein the updating step further 
comprises: 
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receiving at least one segment from the central repository subsystem in response to said 
first requesting step (see Kim , column 7, lines 52-65); 

decrypting the at least one segment (see Dedrjck, column 20, lines 21-29, where it is 
inherent that the encrypted information is decrypted when it gets to the local computer); and 

applying the decrypted at least one segment to the meta data collection to produce the 
meta data collection associated with the user (see Kim , column 7, lines 52-65). 

As to claims 9 and 36, Dedrick as modified, teaches wherein the updating step further 
comprises: 

receiving at least one segment from the central repository subsystem in response to said 
second requesting step (see Kim , column 7, lines 44-51); 

decrypting the at least one segment (see Dedrick , column 20, lines 21-29, where it is 
inherent that the encrypted information is decrypted when it gets to the local computer); and 

generating the meta data collection for the user using the decrypted at least one segment 
(see Dedrick , column 20, lines 23-25). 

1 1 . Claims 12-16, and 39-43 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dedrick (U.S. patent No. 5,710,884) in view of Bull et al. (U.S. patent No. 5,901,287). 

As to claims 12 and 39, Dedrick teaches wherein the utilizing step further comprises: 
continuously collecting meta data resulting from use of the computing device during the 
current user session at the computing device (see column 7, lines 40-52). 
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Dedrick does not teach the method further comprises: 

generating a new segment based on the collected meta data upon completion of 
the current user session; and 

processing the new segment. 
Bull et al. teaches aggregation and synthesization of information (see abstract), in which 
he teaches the method further comprises: generating a new segment based on the collected meta 
data upon completion of the current user session; and processing the new segment (see column 4, 
lines 28-32). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick to include the method further comprises: 
generating a new segment based on the collected meta data upon completion of the current user 
session; and processing the new segment. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of Bull et al. because the method 
further comprises: generating a new segment based on the collected meta data upon completion 
of the current user session; and processing the new segment would allow updated information to 
be available the next time they use the system (see Bull et al. , column 4, lines 28-33). 

As to claims 13 and 40 Dedrick as modified, teaches wherein the processing step 
includes: 

updating the meta data collection with the new segment if said meta data collection exists 
in the local repository (see Bull et al , column 4, lines 28-33) 
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storing the new segment in the local repository as a meta data collection for the user if the 
local repository is at a null state (this limitation holds no patentable weight since under no 
circumstances will this step occur given that the step "updating a local repository of the 
computer device with at least one segment from the central repository that is associated with the 
user to produce a meta data collection associated with the user" occurred prior to this step in 
claim 1 and after that step occurs "the local repository" cannot be in a null state any longer). 

As to claims 14 and 41, Dedrick as modified, teaches wherein the meta data comprises 
application data for being usable in an application executable on the computing device, and 
context data for identifying context in which said application data are used (see Dedrick , column 
7, line 40 through column 8, line 12), and wherein the utilizing step further comprises: 

determining statistical information associated with the meta data, the statistical 
information indicating relationships between the meta data, wherein the retrieving step is 
performed in part based on the statistical information (see Dedrick , column 7, line 65 through 
column 8, line 12). 

As to claims 15 and 42, Dedrick as modified, teaches wherein the context data identify at 
least one of the following: user roles, uniform resource identifiers (URIs), file names, and/or 
form names pertaining to the application data (see Dedrick , column 5, lines 1-16). 



As to claims 16 and 43, Dedrick as modified, teaches wherein the application data 
comprise at least one of the following: page display setting data, file display setting data, user 
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ID/password combinations, field values for computer forms, user's preference data, bookmarks, 
and certificates (see Dedrick, column 7, lines 40-52). 

12. Claims 18 and 45 are rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick 
(U.S. patent No. 5,710,884) in view of Mohan et al. (U.S. patent No. 6,505,230 Bl). 

As to claims 18 and 45, Dedrick does not teach wherein, if the current context is for 
filling in a computer form, the utilizing step further comprises: 

retrieving, from the meta data collection, alternative meta data that are related to the 
current context of filling in the computer form; and 

presenting the alternative meta data to the user for the user's consideration. 

Mohan et al. teaches a client-server independent intermediary system (see abstract), in 
which he teaches wherein, if the current context is for filling in a computer form, the utilizing 
step further includes: retrieving, from the meta data collection, alternative meta data that are 
related to the current context of filling in the computer form; and presenting the alternative meta 
data to the user for the user's consideration (see column 11, lines 7-13). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick to include wherein, if the current context 
is for filling in a computer form, the utilizing step further includes: retrieving, from the meta data 
collection, alternative meta data that are related to the current context of filling in the computer 
form; and presenting the alternative meta data to the user for the user's consideration. 
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It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of Mohan et al. because wherein, 
if the current context is for filling in a computer form, the utilizing step further includes: 
retrieving, from the meta data collection, alternative meta data that are related to the current 
context of filling in the computer form; and presenting the alternative meta data to the user for 
the user's consideration would allow the user to choose to leave some items blank or fill in items 
that are not in the normally found in the user's profile without having to delete or fill in the items 
every time a particular form is filled out (see Mohan et al. , column 11, lines 2-6). 

13. Claims 19 and 46 rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick 
(U.S. patent No. 5,710,884) in view of Chun et al. (U.S. patent No. 2002/0184527 Al). 

As to claims 19 and 46, Dedrick does not teach wherein the current context is for filling 
in a password-changing computer form, and the retrieved meta data comprises a user 
identification and a password, and wherein the applying step comprises: 

presenting to the user the password in an obfuscated format; 

determining whether it is safe to present the actual password to the user; and 

presenting the actual password in a non-obfuscated format when it is determined to be 
safe to present the actual password. 

Chun et al. teaches an intelligent data securing apparatus (see abstract), in which he 
teaches wherein the current context is for filling in a password-changing computer form, and the 
retrieved meta data comprises a user identification and a password, and wherein the applying 
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step comprises: presenting to the user the password in an obfuscated format; determining 
whether it is safe to present the actual password to the user; and presenting the actual password 
in a non-obfuscated format when it is determined to be safe to present the actual password (see 
page 5, paragraph 0050). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick to include wherein the current context is 
for filling in a password-changing computer form, and the retrieved meta data comprises a user 
identification and a password, and wherein the applying step comprises: presenting to the user 
the password in an obfuscated format; determining whether it is safe to present the actual 
password to the user; and presenting the actual password in a non-obfuscated format when it is 
determined to be safe to present the actual password. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of Chun et al. because wherein 
the current context is for filling in a password-changing computer form, and the retrieved meta 
data comprises a user identification and a password, and wherein the applying step comprises: 
presenting to the user the password in an obfuscated format; determining whether it is safe to 
present the actual password to the user; and presenting the actual password in a non-obfuscated 
format when it is determined to be safe to present the actual password would give the user the 
ability to change passwords and retrieve forgotten passwords (see Chun et al. , page 5, paragraph 
0050). 
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14. Claims 23, 50, and 78 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dedrick (U.S. patent No. 5,710,884) in view of Nagahara et al. (U.S. patent No. 6,636,246 Bl). 

As to claims 23 and 50, Dedrick does not teach wherein the GUI displays a graphical tool 
in a cylindrical configuration for organizing the meta data collection. 

Nagahara et al. teaches wherein the GUI displays a graphical tool in a cylindrical 
configuration for organizing the meta data collection (see column 5, lines 18-33). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick to include wherein the GUI displays a 
graphical tool in a cylindrical configuration for organizing the meta data collection. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of Nagahara et al. because 
wherein the GUI displays a graphical tool in a cylindrical configuration for organizing the meta 
data collection would provide superior operability when making selections from a menu (see 
Nagahara et al , abstract). 

As to claim 78, Dedrick does not teach wherein the meta data editor displays a graphical 
tool in a cylindrical configuration for organizing the meta data collection. 

Nagahara et al. teaches wherein the meta data editor displays a graphical tool in a 
cylindrical configuration for organizing the meta data collection (see column 5, lines 18-33). 
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Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick to include wherein the meta data editor 
displays a graphical tool in a cylindrical configuration for organizing the meta data collection. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of Nagahara et al. because 
wherein the meta data editor displays a graphical tool in a cylindrical configuration for 
organizing the meta data collection would provide superior operability when making selections 
from a menu (see Nagahara et al. , abstract). 

15. Claims 26, 53, 58, 65-66, 72, 75-76, and 81 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Dedrick (U.S. patent No. 5,710,884) in view of "Net Security Standard from 
the Open Group Brings the Realization of High- Value E-Commerce for Everyone a Step 
Further". 

As to claims 26 and 53, Dedrick does not teach wherein the computing device 
implements a Common Data Security Architecture (CDSA), and the utilizing step is performed 
by a CDSA add-on module. 

"Net Security Standard from the Open Group Brings the Realization of High- Value E- 
Commerce for Everyone a Step Further" teaches wherein the computing device implements a 
Common Data Security Architecture (CDSA), and the utilizing step is performed by a CDSA 
add-on module (see page 1, paragraphs 1 and 2). 
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Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick to include wherein the computing device 
implements a Common Data Security Architecture (CDSA), and the utilizing step is performed 
by a CDSA add-on module. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of "Net Security Standard from 
the Open Group Brings the Realization of High- Value E-Commerce for Everyone a Step 
Further" because wherein the computing device implements a Common Data Security 
Architecture (CDSA), and the utilizing step is performed by a CDSA add-on module would 
standardize the security protocol so it can more easily be implemented into multiple applications 
(see "Net Security Standard from the Open Group Brings the Realization of High- Value E- 
Commerce for Everyone a Step Further", page 1, paragraph 1). 

As to claim 58, Dedrick teaches wherein the computing device further comprises: 

a plurality of applications selectably executable on the computing device (see column 5, 
lines 52-67); 

a data repository module, provided as an add-in module to the security-service providing 
architecture, for utilizing the meta data collection to assist the user in using the computing device 
(see Figure 8, step 306); and 

an encryption/decryption module for encryption any new segment to be transmitted to the 
central repository subsystem (see column 6, line 35 through column 7, line 8). 
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Dedrick does not teach a security-service providing architecture structure for selectively 
providing security-based services to at least one of the plurality of applications. 

"Net Security Standard from the Open Group Brings the Realization of High-Value E- 
Commerce for Everyone a Step Further" teaches a security-service providing architecture 
structure for selectively providing security-based services to at least one of the plurality of 
applications (see page 1, paragraphs 3-5). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick to include a security-service providing 
architecture structure for selectively providing security-based services to at least one of the 
plurality of applications. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of "Net Security Standard from 
the Open Group Brings the Realization of High- Value E-Commerce for Everyone a Step 
Further" because a security-service providing architecture structure for selectively providing 
security-based services to at least one of the plurality of applications would standardize the 
security protocol so it can more easily be implemented into multiple applications (see "Net 
Security Standard from the Open Group Brings the Realization of High- Value E-Commerce for 
Everyone a Step Further", page 1, paragraph 1). 



As to claim 65, Dedrick as modified, teaches wherein the data repository module 
retrieves the most appropriate meta data using heuristics algorithms (see Dedrick , column 7, line 
40 through column 8, line 12), and transmits the retrieved meta data to an appropriate one of the 
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applications which in turn applies the retrieved meta data in each context (see Dedrick, column 
7, lines 40-52). 

As to claim 66, Dedrick as modified, teaches wherein the current context comprises at 
least one of the following: opening a web page, filling in a computer form, filling in a password- 
changing form, providing a certificate, opening a computer file, processing a computer file, or 
executing an application program (see Dedrick , column 7, lines 40 through column 8, line 23). 

As to claim 72, Dedrick as modified, teaches wherein the current context is for filling in a 
computer form, and said appropriate one of the applications automatically fills the computer 
form with said most appropriate meta data (see Dedrick , column 8, lines 13-22). 

As to claim 75, Dedrick as modified, teaches wherein the data repository module 
formulates search requirements based on a current context of using the computing device, and 
executes a search based on the search requirements using heuristics algorithms (see Dedrick , 
column 7, line 9 through column 8, line 31). 

As to claim 76, Dedrick as modified, teaches wherein the search requirements specify 
weighted properties of the current context of using the computing device (see Dedrick , column 7, 
line 9, through column 8, line 31). 
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As to claim 81, Dedrick as modified, teaches wherein the computing device is configured 
in Common Data Security Architecture (CDSA), and the data repository module is an add-on 
module to the CDSA configuration (see "Net Security Standard from the Open Group Brings the 
Realization of High-Value E-Commerce for Everyone a Step Further" page 1, paragraphs 1-2). 

16. Claims 27, 54, and 82 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dedrick (U.S. patent No. 5,710,884) in view of Charisius et al. (U.S. patent publication No. 
2002/0077842 Al). 

As to claims 27, 54, and 82, Dedrick does not teach wherein the central repository 
subsystem is implemented using WebDAV protocols. 

Charisius et al. teaches wherein the central repository subsystem is implemented using 
WebDAV protocols (see page 1, paragraph 0010). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick to include wherein the central repository 
subsystem is implemented using WebDAV protocols. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick by the teachings of Charisius et al. because 
wherein the central repository subsystem is implemented using WebDAV protocols because 
wherein the central repository subsystem is implemented using WebDAV protocols would allow 
multiple users to view the same workflow and project plans, provide persistent storage, monitor 
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the progress of an activated project plan, and simultaneously create plans from the same 
workflow (see Charisius et al. , page 1, paragraph 0010). 

17. Claims 62-64 are rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick 
(U.S. patent No. 5,710,884) in view of "Net Security Standard from the Open Group Brings the 
Realization of High-Value E-Commerce for Everyone a Step Further" as applied to claims 26, 
53, 58, 65-66, 72, 75-76, and 81 above, and in further view of Kim (U.S. patent No. 6,546,002 
Bl). 

As to claim 62, Dedrick as modified, still does not teach wherein the data repository 
module determines if the local repository is at a null state, transmits a first request to the central 
repository subsystem to transmit any segment associated with the user that has not been applied 
to the computing device if the local repository is not at a null state, and transmits a second 
request to the central repository subsystem to transmit all segments associated with the user if the 
local repository is at a null state. 

Kim teaches wherein the data repository module determines if the local repository is at a 
null state (see column 7, lines 38-65), transmits a first request to the central repository subsystem 
to transmit any segment associated with the user that has not been applied to the computing 
device if the local repository is not at a null state (see column 7, lines 52-65), and transmits a 
second request to the central repository subsystem to transmit all segments associated with the 
user if the local repository is at a null state (see column 7, lines 44-51). 
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Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick as modified, to include wherein the data 
repository module determines if the local repository is at a null state, transmits a first request to 
the central repository subsystem to transmit any segment associated with the user that has not 
been applied to the computing device if the local repository is not at a null state, and transmits a 
second request to the central repository subsystem to transmit all segments associated with the 
user if the local repository is at a null state. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified, by the teachings of Kim because 
wherein the data repository module determines if the local repository is at a null state, transmits a 
first request to the central repository subsystem to transmit any segment associated with the user 
that has not been applied to the computing device if the local repository is not at a null state, and 
transmits a second request to the central repository subsystem to transmit all segments associated 
with the user if the local repository is at a null state would synchronize data with the server if the 
profile was already on the client and copy the profile to the client if it was not already there (see 
Kim , column 7, lines 38-65). 

As to claim 63, Dedrick as modified, teaches wherein the encryption/decryption module 
receives at least one segment from the central repository subsystem in response to said first 
request (see Kim , column 7, lines 52-65), and decrypts the at least one segment (see Dedrick , 
column 20, lines 21-29, where it is inherent that the encrypted information is decrypted when it 
gets to the local computer), and wherein the data repository module applies the decrypted at least 
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one segment to the meta data collection to produce the meta data collection associated with the 
user (see Kim, column 7, lines 52-65). 

As to claim 64, Dedrick as modified, teaches wherein the encryption/decryption module 
receives at least one segment from the central repository subsystem in response to said second 
request (see Kim , column 7, lines 44-51), and decrypts the at least one segment (see Dedrick , 
column 20, lines 21-29, where it is inherent that the encrypted information is decrypted when it 
gets to the local computer), and wherein the data repository module generates the meta data 
collection for the user using the decrypted at least one segment (see Dedrick , column 20, lines 
23-25). 

18. Claims 67-71 are rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick 
(U.S. patent No. 5,710,884) in view of "Net Security Standard from the Open Group Brings the 
Realization of High-Value E-Commerce for Everyone a Step Further" as applied to claims 26, 
53, 58, 65-66, 72, 75-76, and 81 above, and in further view of Bull et al. (U.S. patent No. 
5,901,287). 

As to claim 67, Dedrick as modified, teaches wherein the data repository module 
continuously collects meta data resulting from use of the computing device during the current 
user session at the computing device (see Dedrick , column 7, lines 40-52). 

Dedrick as modified, still does not teach generates a new segment based on the collected 
meta data upon completion of the current user session. 
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Bull et al. teaches generates a new segment based on the collected meta data upon 
completion of the current user session (see column 4, lines 28-32). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick as modified, to include generates a new 
segment based on the collected meta data upon completion of the current user session. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified by the teachings of Bull et al. because 
generates a new segment based on the collected meta data upon completion of the current user 
session would allow updated information to be available the next time they use the system (see 
Bull et al , column 4, lines 28-33). 

As to claim 68, Dedrick as modified, teaches wherein the data repository module updates 
the meta data collection with the new segment if the meta data collection exists in the local 
repository (see Bull et al. , column 4, lines 28-33), and stores the new segment in the local 
repository as a meta data collection for the user if the local repository is at a null state (this 
limitation holds no patentable weight since under no circumstances will this step occur given that 
the step "updating a local repository of the computer device with at least one segment from the 
central repository that is associated with the user to produce a meta data collection associated 
with the user" occurred prior to this step in claim 1 and after that step occurs "the local 
repository" cannot be in a null state any longer). 
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As to claim 69, Dedrick as modified, teaches wherein the meta data comprises 
application data for being usable in an application executable on the computing device, and 
context data for identifying context in which said application data are used (see Dedrick , column 
7, line 40 through column 8, line 12), and wherein the data repository module determines 
statistical information associated with the meta data and retrieves said appropriate meta data 
based on the statistical information, the statistical information indicating relationships between 
the meta data (see Dedrick , column 7, line 65 through column 8, line 12). 

As to claim 70, Dedrick as modified, teaches wherein the context data identify at least 
one of the following: user roles, uniform resource identifiers (URIs), file names, and/or form 
names pertaining to the application data (see Dedrick , column 5, lines 1-16). 

As to claim 71, Dedrick as modified, teaches wherein the application data comprises at 
least one of the following: page display setting data, file display setting data, user ID/password 
combinations, field values for computer forms, user's preference data, bookmarks, and 
certificates (see Dedrick , column 7, lines 40-52). 

19. Claim 73 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick (U.S. 
patent No. 5,710,884) in view of "Net Security Standard from the Open Group Brings the 
Realization of High- Value E-Commerce for Everyone a Step Further" as applied to claims 26, 
53, 58, 65-66, 72, 75-76, and 81 above, and further in view of Mohan et al. (U.S. patent No. 
6,505,230 Bl). 
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As to claim 73, Dedrick as modified, does not teach wherein, if the current context is for 
filling in a computer form, the data repository module retrieves, from the meta data collection, 
alternative meta data that are related to the current context of filling in the computer form, and 
transmits the alternative meta data to said appropriate one of the applications which in turn 
presents the alternative meta data to the user for the user's consideration. 

Mohan et al. teaches wherein, if the current context is for filling in a computer form, the 
data repository module retrieves, from the meta data collection, alternative meta data that are 
related to the current context of filling in the computer form, and transmits the alternative meta 
data to said appropriate one of the applications which in turn presents the alternative meta data to 
the user for the user's consideration (see column 11, lines 7-13). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick as modified, to include wherein, if the 
current context is for filling in a computer form, the data repository module retrieves, from the 
meta data collection, alternative meta data that are related to the current context of filling in the 
computer form, and transmits the alternative meta data to said appropriate one of the applications 
which in turn presents the alternative meta data to the user for the user's consideration. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified, by the teachings of Mohan et al. 
because wherein, if the current context is for filling in a computer form, the data repository 
module retrieves, from the meta data collection, alternative meta data that are related to the 
current context of filling in the computer form, and transmits the alternative meta data to said 
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appropriate one of the applications which in turn presents the alternative meta data to the user for 
the user's consideration would allow the user to choose to leave some items blank or fill in items 
that are not in the normally found in the user's profile without having to delete or fill in the items 
every time a particular form is filled out (see Mohan et al. , column 11, lines 2-6). 

20. Claim 74 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick (U.S. 
patent No. 5,710,884) in view of "Net Security Standard from the Open Group Brings the 
Realization of High- Value E-Commerce for Everyone a Step Further" as applied to claims 26, 
53, 58, 65-66, 72, 75-76, and 81 above, and in further view of Chun et al. (U.S. patent No. 
2002/0184527 Al). 

As to claim 74, Dedrick as modified, still does not teach wherein the current context is 
for filling in a password-changing computer form, and the retrieved meta data includes a user 
identification and a password, and wherein the data repository module controls said appropriate 
one of the applications to present to the user the password in an obfuscated format, determines 
whether it is safe to present the actual password to the user, and controls said appropriate one of 
the applications to present the actual password in a non-obfuscated format when it is determined 
to be safe to present the actual password. 

Chun et al. teaches wherein the current context is for filling in a password-changing 
computer form, and the retrieved meta data comprises a user identification and a password, and 
wherein the data repository module controls said appropriate one of the applications to present to 
the user the password in an obfuscated format, determines whether it is safe to present the actual 
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password to the user, and controls said appropriate one of the applications to present the actual 
password in a non-obfuscated format when it is determined to be safe to present the actual 
password (see page 5, paragraph 0050). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick as modified, to include wherein the 
current context is for filling in a password-changing computer form, and the retrieved meta data 
includes a user identification and a password, and wherein the data repository module controls 
said appropriate one of the applications to present to the user the password in an obfuscated 
format, determines whether it is safe to present the actual password to the user, and controls said 
appropriate one of the applications to present the actual password in a non-obfuscated format 
when it is determined to be safe to present the actual password. 

It would have been obvious to a person having ordinary skill in the art at the time the 
invention was made to have modified Dedrick as modified, by the teachings of Chun et ah 
because wherein the current context is for filling in a password-changing computer form, and the 
retrieved meta data includes a user identification and a password, and wherein the data repository 
module controls said appropriate one of the applications to present to the user the password in an 
obfuscated format, determines whether it is safe to present the actual password to the user, and 
controls said appropriate one of the applications to present the actual password in a non- 
obfuscated format when it is determined to be safe to present the actual password would give the 
user the ability to change passwords and retrieve forgotten passwords (see Chun et al , page 5, 
paragraph 0050). 
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21. Claim 84 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dedrick (U.S. 
patent No. 5,710,884) in view of "Net Security Standard from the Open Group Brings the 
Realization of High- Value E-Commerce for Everyone a Step Further" as applied to claims 26, 
53, 58, 65-66, 72, 75-76, and 81 above, and further in view of Lim (U.S. patent No. 6,728,843 
Bl). 

As to claim 84, Dedrick as modified, does not teach wherein the data repository module 
resides on a proxy machine accessible through a predetermined connection means. 

Lim teaches integrating authentication and authorization mechanisms into an application 
access control system (see abstract) in which he teaches wherein the data repository module 
resides on a proxy machine accessible through a predetermined connection means (see column 8, 
lines 46-58). 

Therefore, it would have been obvious to a person having ordinary skill in the art at the 
time the invention was made to have modified Dedrick as modified, to include wherein the data 
repository module resides on a proxy machine accessible through a predetermined connection 
means. 

It would have been obvious to a person having ordinary skill in the art at the time the invention 
was made to have modified Dedrick as modified, by the teachings of Lim because wherein the 
data repository module resides on a proxy machine accessible through a predetermined 
connection means would access to remote servers through a common API (see column 7, lines 
34-44). 
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Allowable Subject Matter 

22. Claims 25, 80, 88 and 90 are allowed. 

23. Claim 89 would be allowable if rewritten or amended to overcome the rejection(s) under 
35 U.S.C. 112, 2nd paragraph, set forth in this Office action. 

24. Claim 52 would be allowable if rewritten to overcome the rejection(s) under 35 
U.S.C. 1 12, 2nd paragraph, set forth in this Office action and to include all of the limitations of 
the base claim and any intervening claims. 

Response to Arguments 

25. Applicant's arguments filed 9-November-2004 have been fully considered but they are 
not persuasive. 

26. In response to applicant's argument that "Dedrick's customization of information does 
not vary depending on the different contexts of using the end-use device", the arguments have 
been fully considered but are not deemed persuasive. Dedrick teaches retrieving different 
information for different contexts or roles of the end user. If the user is browsing the web, 
certain file formats and colors are automatically chosen for the use (see column 7, lines 40-64). 
If the user is making a purchase, name and credit card information is given to the advitiser (see 
column 8, lines 13-22). Given these two different rolls of the user, the customization 
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information is changing depending on the information that is required by the current context or 
roll the user is experiencing. 

Conclusion 

27. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

28. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jacob F. Betit whose telephone number is (571) 272-4075. The 
examiner can normally be reached on Monday through Friday 9 am to 5 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Dov Popovici can be reached on (571) 272-4083. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 



Application/Control Number: 10/051,951 



Page 35 



AH Unit: 2164 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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